~ ZHPCleaner v2019.1.11.7 by Nicolas Coolman (2019/01/11) ~ Run by Mohammed Salaheddine (Administrator) (14/01/2019 10:17:42) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Scan ~ Report : C:\Users\Mohammed Salaheddine\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Mohammed Salaheddine\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 7 Ultimate, 32-bit Service Pack 1 (Build 7601) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (41) ---\\ Scheduled automatic tasks. (1) FOUND task: [AutoKMS] [C:\Windows\AutoKMS\AutoKMS.exe] =>HackTool.AutoKMS ---\\ Explorer ( File, Folder) (414) FOUND folder: C:\Users\Mohammed Salaheddine\AppData\Local\Google\Chrome\User Data\Default\Extensions\odcmcehfddfnnnbaifjhkikddagchieg =>Hijacker.Browser FOUND file: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS FOUND file: C:\Windows\System32\drivers\wcmvcam.sys [ - WebcamMax Capture] =>.SUP.TenkiTechnology FOUND file: C:\Windows\Installer\wix{7774002B-60B3-4146-BF82-5BF767D468B8}.SchedServiceConfig.rmi =>.SUP.Empty FOUND file: C:\Windows\Installer\wix{827F31DC-A307-4A62-B640-840D1A5D2698}.SchedServiceConfig.rmi =>.SUP.Empty FOUND file: C:\Windows\Installer\wix{BC5A9829-B67F-4E3A-83EE-0CDBDB6FBA1C}.SchedServiceConfig.rmi =>.SUP.Empty FOUND file: C:\Windows\Installer\wix{C22F76F2-AC9E-44BA-B297-71485F94022F}.SchedServiceConfig.rmi =>.SUP.Empty FOUND file: C:\Windows\Installer\wix{D03EC4B7-E520-4A6F-974C-4F48533838EC}.SchedServiceConfig.rmi =>.SUP.Empty FOUND file: C:\Windows\Installer\wix{E2237AB2-C484-4362-A5B8-20F8389C0E89}.SchedServiceConfig.rmi =>.SUP.Empty FOUND file: C:\Windows\Installer\MSI27E8.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSI4B03.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSI4CF8.tmp [.NET Foundation - WiX Custom Actions] =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSI6E5B.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSIA9E1.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSIAF31.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSIB149.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSIC938.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSICB30.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSICE7C.tmp [.NET Foundation - WiX Custom Actions] =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSID319.tmp [.NET Foundation - WiX Custom Actions] =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSID578.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSIDAE3.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSIEDF6.tmp =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSIEE96.tmp [.NET Foundation - WiX Custom Actions] =>.SUP.MSIInstaller FOUND file: C:\Windows\Installer\MSIEFCC.tmp [.NET Foundation - WiX Custom Actions] =>.SUP.MSIInstaller FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR1515.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR158B.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR1797.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR17AB.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR18E.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR196F.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR1A88.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR1B55.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR1B5D.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR1C5.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR1E75.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR1F7E.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR2020.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR20AA.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR20DA.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR21F.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR22B7.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR2337.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR243B.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR24A1.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR27DC.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR28B0.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR28B7.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR28C6.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR2B11.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR2F5D.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR2FD8.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR3321.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR3BA9.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR3BB8.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR4735.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR499E.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR4B7D.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR4CA9.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR4E18.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR4E1A.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR5160.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR517.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR52DD.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR548E.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR5540.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR56F0.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR57D1.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR5817.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR5BB8.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR622.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR6389.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR6519.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR65A5.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR699B.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR6D35.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR7070.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR738B.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR7615.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR761A.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR7652.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR7751.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR77B0.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR7BCE.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR7BFD.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR806.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR81E8.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR82EB.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR8630.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR867F.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR8A07.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR8A16.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR8A65.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR8B2A.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR969C.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR96DE.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR991C.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR9962.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR9B0F.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR9DB7.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVR9DC5.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRA04.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRA040.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRA271.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRA2F5.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRAA82.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRAD91.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRB140.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRB1FA.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRB3E4.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRB6C4.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRB887.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRB9C6.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRBA7B.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRBD57.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRBDFA.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRC19B.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRC1B4.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRC29.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRC321.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRC364.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRCA48.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRCDDB.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRCEBF.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRCF07.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRD2E9.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRD92C.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRDBD0.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRDD00.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRDED4.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRDFE4.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRE4B3.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRE6B9.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRF6AE.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRF8D0.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRF9BA.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRFBDD.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRFEA9.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\CVRFFA.tmp.cvr =>.SUP.Temporary.Empty FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileBroom.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileCheck.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileClose.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileDetected.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileExit-40.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileFB.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileForum.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileGP.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileInfo.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileNav_FF.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileNav_GG.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileNav_IE.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileNav_OP.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFilePayPal.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFilePercent.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileQuar.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileQuestion.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileRapport.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPCFileSearch.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPDFileBGSocial.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\ZHPDFilelogo-texte.png =>.SUP.Temporary.Picture FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF093264C34A2B855B.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF14B98B42CA06BC06.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF3580413DCFAD26A4.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF49BDE93427C995DC.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF6A3EB2A6FE803A17.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF8DA9BC8F22D16083.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF90A4CD29337A75E1.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF9C616AA5FE2CC732.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DF9E861DB277D2B5B5.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DFBBB66FECACE4491A.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DFC099F6834404CB16.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Mohammed Salaheddine\AppData\Local\Temp\~DFC4BAF441D7A69153.TMP =>.SUP.Temporary.Other FOUND file: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS FOUND file: C:\Program Files\WeatherInspect\42H.exe [ - WeatherInspect Setup] =>Adware.WeatherInspect FOUND file: C:\Program Files\WeatherInspect\5V7LZ0KF1PY7CEG.exe.config =>Adware.WeatherInspect FOUND file: C:\Program Files\WeatherInspect\config.conf =>Adware.WeatherInspect FOUND file: C:\Program Files\WeatherInspect\Y90NG.exe.config =>Adware.WeatherInspect FOUND folder: C:\Program Files\Microleaves\Online Application =>.SUP.Microleaves FOUND folder: C:\Program Files\Microleaves =>.SUP.Microleaves FOUND folder: C:\Program Files\WeatherInspect =>Adware.WeatherInspect FOUND file: C:\ProgramData\Logic Cramble\Config.json =>.SUP.Linkury FOUND file: C:\ProgramData\Logic Cramble\set.exe.config =>.SUP.Linkury FOUND file: C:\ProgramData\Logic Cramble\System.Data.SQLite.xml =>.SUP.Linkury FOUND file: C:\ProgramData\Microsoft Toolkit\Settings.xml =>HackTool.AutoKMS FOUND file: C:\ProgramData\PrefsSecure\Nettrans.exe.config =>.SUP.Linkury FOUND file: C:\ProgramData\PrefsSecure\prefs.xml =>.SUP.Linkury FOUND folder: C:\ProgramData\Logic Cramble\X64 =>.SUP.Linkury FOUND folder: C:\ProgramData\Logic Cramble\X86 =>.SUP.Linkury FOUND folder: C:\ProgramData\Logic Cramble =>.SUP.Linkury FOUND folder: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS FOUND folder: C:\ProgramData\PrefsSecure =>.SUP.Linkury FOUND folder: C:\Windows\AutoKMS =>HackTool.AutoKMS FOUND folder: C:\Users\Mohammed Salaheddine\AppData\Roaming\FastDataX\log =>Adware.FastDataX FOUND folder: C:\Users\Mohammed Salaheddine\AppData\Roaming\Microleaves\Online Application 2.7.0 =>.SUP.Microleaves FOUND folder: C:\Users\Mohammed Salaheddine\AppData\Roaming\FastDataX =>Adware.FastDataX FOUND folder: C:\Users\Mohammed Salaheddine\AppData\Roaming\Microleaves =>.SUP.Microleaves FOUND folder: C:\Users\Mohammed Salaheddine\AppData\Roaming\SystemHealer =>.SUP.SystemHealer FOUND folder: C:\Windows\Installer\MSI11DE.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI1267.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI1355.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI15A9.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI179.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI1D14.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI1D25.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI20AD.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI21C8.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI236E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI2398.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI2478.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI26.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI2D5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI2F2F.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI3212.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI33E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI3416.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI34E9.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI35ED.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI373A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI3873.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI3A46.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI3A63.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI3B6D.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI3CF6.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI3E7B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4244.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI42B4.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI436A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI43EB.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4436.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4476.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI45B2.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI45C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI45DF.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4743.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI47A5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI48AF.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4A06.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4A45.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4A9C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4CC5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4CCB.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4D1D.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4E33.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4EF2.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI4F3D.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5038.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI525B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5384.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5432.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI573E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI59C4.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5AE7.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5BE4.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5BE0.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5D3.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5F79.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5F9B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI5FDB.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI62C7.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI6327.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI667.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI66B0.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI694F.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI6A69.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI6C11.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI6C99.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI6E0F.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI6EAC.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI6FB6.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7119.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7238.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI725B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI74F5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI75D5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI77F7.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7821.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI797A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7A39.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7B82.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7BB0.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7C0A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7D24.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7D79.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7DC3.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7E8C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI7FA8.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8040.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8189.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI81FF.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8219.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI83A3.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI83AC.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI83CF.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI842D.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI85A0.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI85C3.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI86DD.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8981.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8B47.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8B9F.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8CBE.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8D36.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8D6B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8E17.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI8F50.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI907E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI91B7.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9226.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI923.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9244.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9282.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI934E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI93CD.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI93FA.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI948.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI94E5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9533.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9582.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI963D.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI966C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9812.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9AC6.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9CDA.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI9EFD.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIA101.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIA3DC.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIA44C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIA5C3.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIAC9.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIAF88.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIB3EC.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIB600.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIB71A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIBE6F.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIBE93.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC40.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC418.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC627.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC6AE.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC813.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC8E9.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC8F1.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC94B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC9AD.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIC9C4.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSICA2E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSICB6A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSICC87.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSICE1.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSICE8B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSICFA.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSICFC4.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSICFE1.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID02E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID197.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID2A5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID33D.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID409.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID4C3.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID4F8.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID4F6.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID61B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID72B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID783.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID7B9.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID860.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID93A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSID9F8.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDA0A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDA34.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDB8.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDBD.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDC0B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDCB5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDDF0.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDFA5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIDFB5.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE3DB.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE41B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE4C0.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE540.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE563.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE592.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE5A0.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE5DD.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE61C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE68A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE69E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE884.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIE929.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIEA33.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIEB7.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIEC37.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIEC8E.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIEF05.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF133.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF157.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF34B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF3BC.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF54F.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF65C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF74.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF7B4.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF881.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF8BE.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIF929.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIFA2B.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIFB9C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIFC0A.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIFCF6.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIFD04.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIFE6C.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSIFE8F.tmp- =>.SUP.Empty FOUND folder: C:\Users\Mohammed Salaheddine\AppData\LocalLow\Apple Computer =>.SUP.Empty ---\\ Registry ( Key, Value, Data) (125) FOUND key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C0D38E5A-7CF8-4105-8FE8-31B81443A114} [YoutubeAdBlock] =>PUP.Optional.YouTubeAdBlock FOUND key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} [https://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRHOjYN9_5EdL[...]] [Search the web] =>PUP.Optional.IMBooster FOUND key: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch [https://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRHOjYN9_5EdL[...]] [Search the web] =>PUP.Optional.IMBooster FOUND data: HKCR\.jpe\\Default [Bad : PandaViewer.jpg] =>Hijacker.Browser FOUND data: HKCR\.tif\\Default [Bad : PandaViewer.tif] =>Hijacker.Browser FOUND key: HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool] =>Toolbar.Ask FOUND key: HKLM\SOFTWARE\Classes\Mindjet.Denali.Client.ClientConnectionSettings [Mindjet.Denali.Client.ClientConnectionSettings] =>.SUP.ClientConnect FOUND key: HKLM\SOFTWARE\Classes\PandaViewer.bmp [PandaViewer.bmp] =>Hijacker.Browser FOUND key: HKLM\SOFTWARE\Classes\PandaViewer.gif [PandaViewer.gif] =>Hijacker.Browser FOUND key: HKLM\SOFTWARE\Classes\PandaViewer.ico [PandaViewer.ico] =>Hijacker.Browser FOUND key: HKLM\SOFTWARE\Classes\PandaViewer.jpeg [PandaViewer.jpeg] =>Hijacker.Browser FOUND key: HKLM\SOFTWARE\Classes\PandaViewer.jpg [PandaViewer.jpg] =>Hijacker.Browser FOUND key: HKLM\SOFTWARE\Classes\PandaViewer.png [PandaViewer.png] =>Hijacker.Browser FOUND key: HKLM\SOFTWARE\Classes\PandaViewer.tif [PandaViewer.tif] =>Hijacker.Browser FOUND key: HKEY_USERS\S-1-5-21-3876886970-1219916961-2543480193-1000\Software\csastats [] =>Adware.InstallCore FOUND key: HKCU\Software\csastats [] =>Adware.InstallCore FOUND key: HKCU\Software\undefined [] =>.SUP.Downloader FOUND key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23E4C6D00564386418B357E6097ECF3E [02:\Software\Microleaves\ (Not File)] =>.SUP.Microleaves FOUND key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1} [Microleaves] =>.SUP.Microleaves FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\vi\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\uk\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\tr\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\th\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\sv\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\sr-Latn-CS\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\sr-Cyrl-CS\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\sl\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\sk\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\ro\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\pt\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\pt-BR\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\pl\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\no\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\nl\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\ms\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\lv\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\lt\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\id\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\hu\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\hr\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\he\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\fi\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\eu\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\et\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\el\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\da\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\cs\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\ca\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\bg\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\ar\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\zh-Hant\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\zh-Hans\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\ru\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\ko\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\ja\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\it\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\fr\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\es\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\de\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.51204.0\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\vi\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\uk\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\tr\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\th\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\sv\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\sr-Latn-CS\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\sr-Cyrl-CS\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\sl\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\sk\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\ro\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\pt\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\pt-BR\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\pl\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\no\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\nl\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\ms\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\lv\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\lt\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\id\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\hu\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\hr\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\he\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\fi\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\eu\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\et\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\el\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\da\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\cs\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\ca\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\bg\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\ar\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\zh-Hant\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\zh-Hans\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\ru\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\ko\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\ja\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\it\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\fr\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\es\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\de\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Microsoft Silverlight\4.0.50917.0\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\MSXML 4.0\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\ProgramData\Avira\Launcher\Logfiles\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\ProgramData\Avira\Launcher\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\ProgramData\Avira\Launcher\apps\icons\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\ProgramData\Avira\Launcher\apps\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Avira\Launcher\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\WinZip\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{3DC8348C-37E1-4532-B67C-A43818FE5BEC}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{69509795-804E-4E3E-A415-465BA3A482CA}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{95568931-07CB-498A-8C16-A6085786CDE1}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{D358402C-216A-4621-ADFD-788920D88B94}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{E36CB3F0-BFB5-4989-B5F3-17161068FB54}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{D302BF5D-BEE4-48B8-A9A9-B9613EF18C3D}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{9D1941C0-34AD-475A-BD6F-A0E622ADB57B}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{455B0AF8-1176-47AB-8F2D-EFAE36183B7A}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{939DB47C-9B90-478B-B2A6-CB0C4000160E}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{EB563B29-EE85-4DBA-A9BE-2EAF9E224B6B}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{95922FE2-029B-43C0-B144-312607791ED5}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{453AE451-1F97-48E8-87E9-C364012FFC5C}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{66010B80-D4AD-43AC-B033-07AC5AB25508}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{CD6E6AA9-6AD2-474F-8BEF-FE466C0605AB}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{D621403D-E866-428B-B7DB-1EA40E640443}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{6676B234-A2EE-445B-B199-287D8B1ACAB3}\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\MOHAMM~1\AppData\Local\Temp\{AE823BAC-DFE4-42EC-B899-A418FC9DB710}\ [No Folder] =>.SUP.Obsolete.NoFolder ---\\ Summary of the elements found (20) https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.TenkiTechnology https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Empty https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.MSIInstaller https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Empty https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Picture https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Other https://nicolascoolman.eu/2017/10/29/adware-weatherinspect/ =>Adware.WeatherInspect https://nicolascoolman.eu/2017/12/24/sup-microleaves/ =>.SUP.Microleaves https://nicolascoolman.eu/2017/09/07/pup-optional-salus/ =>.SUP.Linkury https://nicolascoolman.eu/2017/06/21/adware-fastdatax/ =>Adware.FastDataX https://nicolascoolman.eu/2017/10/03/sup-systemhealer/ =>.SUP.SystemHealer https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.YouTubeAdBlock https://nicolascoolman.eu/2017/09/08/adware-imbooster/ =>PUP.Optional.IMBooster https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask https://www.anti-malware.top/2016/06/15/superfluous-clientconnect/ =>.SUP.ClientConnect https://nicolascoolman.eu/2017/09/19/adware-installcore-3/ =>Adware.InstallCore https://nicolascoolman.eu/2017/12/22/sup-downloader/ =>.SUP.Downloader https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Obsolete.NoFolder ---\\ Result of repair ~ Any repair made ~ Browser not found (Opera Software) ---\\ Statistics ~ Items scanned : 63258 ~ Items found : 570 ~ Items cancelled : 0 ~ Items options : 12/12 ~ Space saving (bytes) : 250221 ~ End of search in 00h12mn19s ZHPCleaner-[S]-14012019-10_30_01.txt