~ ZHPCleaner v2021.7.7.309 by Nicolas Coolman (2021/07/07) ~ Run by Ali Ahmed (Administrator) (25/07/2021 12:43:46) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Scan ~ Report : D:\Desktop\ZHPCleaner (S).txt ~ Quarantine : C:\Users\Ali Ahmed\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ System Restore Point : OK ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Enterprise, 64-bit (Build 22000) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (25) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (13) FOUND file: C:\Users\Ali Ahmed\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>ChromiumPreference FOUND file: C:\Windows\Installer\wix{4F8A8DF5-A259-4741-9F4C-AAE8BFBD4950}.SchedServiceConfig.rmi =>.SUP.Empty FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\6d0b6d42-e747-4da4-a5f9-ce6dd2a35cb4.tmp =>.SUP.Temporary.Empty FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\aria-debug-17596.log =>.SUP.Temporary.OneDrive FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\hwipe_job.lock =>.SUP.Temporary.Empty FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\wct3CEE.tmp =>.SUP.Temporary.Office FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\wct483A.tmp =>.SUP.Temporary.Office FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\wct676C.tmp =>.SUP.Temporary.Office FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\wct7141.tmp =>.SUP.Temporary.Office FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\~DF431AF1BD97DF1FA3.TMP =>.SUP.Temporary.Other FOUND file: C:\Users\Ali Ahmed\AppData\Local\Temp\~DF5AA27DCBB40CA1AC.TMP =>.SUP.Temporary.Other FOUND folder: C:\Windows\Installer\MSI1C43.tmp- =>.SUP.Empty FOUND folder: C:\Windows\Installer\MSI2443.tmp- =>.SUP.Empty ---\\ Registry ( Key, Value, Data) (4) FOUND key: [X64] HKLM\SOFTWARE\Classes\CLSID\{A1365519-3256-41A0-BFD6-9FE9B4B0DC31} [WindowsUpdateAdministration] =>PUP.Optional.UpdateAdmin FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Java\jre1.8.0_291\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\ProgramData\Kaspersky Lab\KES\PdmHist\ [No Folder] =>.SUP.Obsolete.NoFolder FOUND value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\ProgramData\Kaspersky Lab\KES\upgrade\ [No Folder] =>.SUP.Obsolete.NoFolder ---\\ Summary of the elements found (8) https://nicolascoolman.eu/2020/10/01/preferences-navigateurs-chromium/ =>ChromiumPreference https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Empty https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Empty https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.OneDrive https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Office https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Other https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/ =>PUP.Optional.UpdateAdmin https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Obsolete.NoFolder ---\\ Result of repair ~ Any repair made ~ Internet Explorer OK ---\\ Statistics ~ Items scanned : 103019 ~ Items found : 18 ~ Items cancelled : 0 ~ Space saving (bytes) : 115101 ~ Items options : 17/17 ---\\ OPTIONS NOT ACTIVES ~ End of search in 00h08mn06s ---\\ Reports (3) ZHPCleaner-[R]-25072021-12_39_19.txt ZHPCleaner-[S]-25072021-12_29_15.txt ZHPCleaner-[S]-25072021-12_51_52.txt